Hackers compromise 4,800 GitHub accounts to steal cloud credentials

A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on BleepingComputer.